ZeroTier will ignore interfacePreflxBlacklist when in relay mode

[joseph-henry]

When given the local.conf config:

{
        "settings": {
                "interfacePrefixBlacklist": ["ethX"]
        }
}

ZeroTier will initially obey the blacklist but when/if allowed to relay it will ignore the blacklist.

Will fix soon.

[pacmac]

Also, blacklist IPs does not work when in relay mode.

{
  "physical": {
    "10.0.0.0/8": {
      "blacklist": true
    },
    "172.16.0.0/12": {
      "blacklist": true
    },
    "192.168.0.0/16": {
      "blacklist": true
    }
  }
}

this has no effect and the managed routes are still added:

192.168.0.0/24     172.24.xxx.xxx    UGS    zt9nrk98
192.168.1.0/24     172.24.xxx.xxx     UGS    zt9nrk98

[laduke]

The physical property only applies to physical network interfaces. I'm don't there's a way to block a specific virtual IP or Route. You can disable "allowManaged" on the client to prevent all management of the zerotier interface.

zerotier-cli set {network_id} allowManaged=0

[isorochan]

Any updates? I have the same issue. I added local.conf on win11 in C:\ProgramData\ZeroTier\One restarted zero tire service and and interfacePrefixBlacklist doesn't appear in the output of zerotier-cli.bat info -j

Looks like zero tire doesn't read this file at all